$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft File: iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft (raw, json) Hash identifier: WDR8/Ik0BF55+OL/G2L36VM8a0KCtIY4PugLOSsJF68= Subject key identifier: CB:2F:5C:67:BF:33:46:BB:06:41:EE:89:55:24:6E:9B:ED:26:B5:27 Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045 Certificate serial: 0197C26DD6BFB5E9F52631FD5CECEC30B36B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft Manifest number: 15E3 Signing time: Mon 30 Jun 2025 20:01:07 +0000 Manifest this update: Mon 30 Jun 2025 20:01:07 +0000 Manifest next update: Tue 01 Jul 2025 20:01:07 +0000 Files and hashes: 1: 03ttC7MNZ-eN5xujfgJt0dz2GhY.roa (hash: N6ysVlOyohrexefrFHAfhhT7Stu1rZo1RMy/wUBR7MQ=) 2: 5WM_zAMHpqFWYVzE6IZZi6hpdnY.roa (hash: /uh58nVe20e1KyQ1vsMKFZb5lxZnKC2kKaUik0+Y3GI=) 3: 91l4ZLiFMW7ttAVA_13Nf_vSwVo.roa (hash: 6ZMOAo7QZ6muivlXzRnrZugrdEX8AI+FwG0c36ozCJU=) 4: AhTO7WBaZMu_Dr1N8NIiVL9XCpU.roa (hash: nT81Q9YgZY4q725cyr+A+UtBMshY9pksRnCCbkN57Ug=) 5: IWmCzk6cq45EnYSJ96MKtN3JC8I.roa (hash: XoBuI/JfFprw14YCMqakYs9R02jMXW/1dfsiuGeuG6E=) 6: K38hiAFbaYjOEYyRFTbUch8B7wY.roa (hash: 31zMtO1y1o6k5IZqjvDfJAnA0Cm9rKJm+VuP2mPceec=) 7: Nhe42hsHlP2RBTZ7_kDi1_iiNfU.roa (hash: 1ChBAUPQiX4oKvnrR0PT43uzbwy03dsgNX67eormdRo=) 8: R0-mbrlkQj2Gy6Nt6WDL988hyv8.roa (hash: TNdehcbateMNki61iSUqlN2sgtl/UwdBnEcO8z3cSF0=) 9: TZy2Lj5Do11SuxgPs2obSCOm6wo.roa (hash: wQuMuVdv7vu7zZtJFhzSt8gNYJsiuUHW5bBFqAXYCwE=) 10: VNqmap2cBv5ChNgOn9ms1SN0H5o.roa (hash: w05TtavIfxX9TdHISFDvez7dGIfRkXGhTg1l75h/Dg4=) 11: YqBkj1ylfOU3p4nh5tWQJYeuZwc.roa (hash: e97BhLLiAxaAWW5yEKTWMiYt2ECxgzdgXHgWr5LzCXc=) 12: _uI7KgVWERW5ciSrmPSld8U6PMM.roa (hash: aCEcvYxY6pmMS4ucVj7Td5LTfLLeSnWc2GvVH4GmfSA=) 13: bksTsZ-cnXirfbGe5nOmhmEPTTY.roa (hash: TrYgodJgIf3QruBYh8Ql9SuQhoWZToHJF9bYnOMjot0=) 14: hyT2EfPv12n8N_VGnG0HoBv4WA8.roa (hash: qwaOMuBBLopfdSUzcmQ8ElB63zBFeiv+lpSkM4LzxhM=) 15: iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl (hash: 7do0V7I6mcabynB9spZGBBVWX73ctxJmn29v+W+HNL0=) 16: jjdoaZZ5Z0TLOYBEYoTrJF5pk8g.roa (hash: 11pCwSSXo25WM4RT2PeM5zRMDmPAdkAqViKY2TeGUtA=) 17: wqytb1PA_Vs89tauNyxpWqTXHcs.roa (hash: QrQj+j17rq7QnFS50LWdWH3bq1I5zdpeI+T0lQTYEG8=) 18: wyWiX4Im8oisLaWNIo4l-9mnjwE.roa (hash: cAnnmggJab3fQCHKyRLtLldwW9SkCCdIfA55sbJKMoQ=) 19: ybDfqb3XZNRLUBxHkNBKsIILb5s.roa (hash: 7YCnDF3mW0qqjrtRov5y15/Rj5mINnxt1l1MoE0Q2v4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Jul 2025 15:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:c2:6d:d6:bf:b5:e9:f5:26:31:fd:5c:ec:ec:30:b3:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045 Validity Not Before: Jun 30 20:01:07 2025 GMT Not After : Jul 1 20:01:07 2025 GMT Subject: CN=cb2f5c67bf3346bb0641ee8955246e9bed26b527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b7:0b:97:7e:1b:20:ab:55:e1:73:2e:bc:96: b8:ba:06:8b:1d:84:9b:c3:5a:38:fe:66:20:f6:34: a5:b4:cc:7b:cc:32:27:82:17:fd:44:c4:52:b5:96: a9:f1:84:8c:6d:8a:c9:8c:19:94:2f:43:58:02:86: 34:34:05:17:c3:9f:6d:3c:85:c4:eb:87:b1:db:81: 82:b0:d8:61:57:65:e6:1a:05:52:80:38:c7:c4:ec: 81:24:da:68:4a:0a:44:78:cf:8b:32:4b:1d:7e:6d: c8:5c:56:27:18:23:19:68:e8:6e:3a:73:f9:d1:7b: 01:74:5d:f6:0b:13:fe:84:77:13:80:57:ba:4b:d3: 62:a8:5c:b6:48:d3:b8:c6:cc:bf:35:d5:90:89:b8: 09:6f:e0:78:9e:9e:85:f6:6d:70:13:bd:77:89:a4: d0:09:76:04:f1:c0:7a:c4:15:c7:2c:ff:cf:83:33: 4d:3b:2b:ac:e1:fd:db:11:e7:2c:da:a3:85:2b:d4: 14:9e:c7:5c:0a:c3:55:a6:e7:cc:71:7a:8f:85:11: 9a:99:cc:51:4c:e6:b1:73:84:f6:0b:8a:a8:7e:c3: e0:92:e4:c6:62:94:bb:09:62:34:ce:a1:d0:c5:b7: c5:58:10:46:7e:a7:a4:8f:c5:eb:46:bd:1c:8f:3a: c1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:2F:5C:67:BF:33:46:BB:06:41:EE:89:55:24:6E:9B:ED:26:B5:27 X509v3 Authority Key Identifier: keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:cb:1b:fe:15:63:6d:8d:9b:d8:32:45:fd:63:c5:c6:ce:81: 65:1a:8a:ec:8f:98:a6:ba:22:3b:84:f6:97:4f:c9:62:5a:66: 7e:bb:4f:20:da:db:cd:34:f5:02:2a:68:10:4c:90:5b:2c:81: 81:46:0f:1b:b4:71:94:ac:cc:86:d5:fc:85:25:ce:1a:37:7c: a1:08:8c:a8:f6:63:17:14:da:a3:ee:4f:85:e2:a0:79:39:10: 1a:2b:de:79:e9:66:d7:a4:98:49:a1:4d:e2:b5:af:bc:43:80: 0b:38:35:a5:a3:d7:c4:03:dd:09:9a:c5:3b:90:0b:10:54:eb: 9c:93:ba:4d:b5:18:4b:20:ac:28:4c:86:0e:9a:f8:4f:9a:e2: 74:91:47:df:16:2c:66:c6:50:f5:51:1c:9b:1f:ac:89:63:d9: 02:54:d8:ea:04:60:6d:af:ef:14:e2:ed:8d:5b:7b:42:00:7d: 3c:58:52:b2:a6:77:87:7a:2a:86:a6:19:df:b6:c2:5d:2d:84: 03:a0:c3:d7:c9:b6:8d:d4:da:5c:1b:f9:3b:66:30:eb:68:db: 3d:3b:19:9d:35:21:52:ef:fc:9e:60:bb:bf:75:e5:40:b4:b2: bb:7a:8c:b8:a1:d9:87:8b:85:98:1f:6d:33:3f:e6:1d:2c:b0: a5:7f:e6:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfCbda/ten1JjH9XOzsMLNrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx NjAwNDUwHhcNMjUwNjMwMjAwMTA3WhcNMjUwNzAxMjAwMTA3WjAzMTEwLwYDVQQD EyhjYjJmNWM2N2JmMzM0NmJiMDY0MWVlODk1NTI0NmU5YmVkMjZiNTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LcLl34bIKtV4XMuvJa4ugaLHYSb w1o4/mYg9jSltMx7zDInghf9RMRStZap8YSMbYrJjBmUL0NYAoY0NAUXw59tPIXE 64ex24GCsNhhV2XmGgVSgDjHxOyBJNpoSgpEeM+LMksdfm3IXFYnGCMZaOhuOnP5 0XsBdF32CxP+hHcTgFe6S9NiqFy2SNO4xsy/NdWQibgJb+B4np6F9m1wE713iaTQ CXYE8cB6xBXHLP/PgzNNOyus4f3bEecs2qOFK9QUnsdcCsNVpufMcXqPhRGamcxR TOaxc4T2C4qofsPgkuTGYpS7CWI0zqHQxbfFWBBGfqekj8XrRr0cjzrBjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMsvXGe/M0a7BkHuiVUkbpvtJrUnMB8GA1UdIwQY MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt NTE5MjAzNzMzNTNjLzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZssb/hVj bY2b2DJF/WPFxs6BZRqK7I+YproiO4T2l0/JYlpmfrtPINrbzTT1AipoEEyQWyyB gUYPG7RxlKzMhtX8hSXOGjd8oQiMqPZjFxTao+5PheKgeTkQGiveeelm16SYSaFN 4rWvvEOACzg1paPXxAPdCZrFO5ALEFTrnJO6TbUYSyCsKEyGDpr4T5ridJFH3xYs ZsZQ9VEcmx+siWPZAlTY6gRgba/vFOLtjVt7QgB9PFhSsqZ3h3oqhqYZ37bCXS2E A6DD18m2jdTaXBv5O2Yw62jbPTsZnTUhUu/8nmC7v3XlQLSyu3qMuKHZh4uFmB9t Mz/mHSywpX/meA== -----END CERTIFICATE-----Generated at Tue Jul 1 00:34:14 2025 by rpki-client